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PURPOSE: (U// FQUO ^To forward to the Intelligence Oversight Board (lOB) of the 
President’s Foreign Intelligence Advisory Board, via the Assistant to the Secretary of Defense 
for Intelligence Oversight (ATSD(IO)), NSA’s quarterly report on its intelligence activities. 

BACKGROUND: (U//FOUO) Executive Order 12333 and Executive Order 12863 
require Intelligence Community agency heads and Intelligence Community General Counsels 
and Inspectors General, respectively, to report to the lOB on a quarterly basis concerning 
intelligence activities that they have reason to believe may be unlawful or contrary to Executive 
Order or Presidential Directive. The enclosed memorandum covers all reportable activities 
known to the Inspector General and General Counsel. Per PIOB letter of 6 August 1982, 
Agency heads are responsible for reporting separately any additional reportable activities 
known to them, unless the President has specifically instructed that the Board is not to be 
informed. The Director’s signature signifies that no other activities that require reporting are 
known to him. 

RECOMMENDATION: (U) Director sign the enclosed memora/^ 
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1. (U) INSPECTOR GENERAL ACTIVITIES 


a. During this quarter, the Office of Inspector General (OIG) reviewed 
various intelligence activities of the National Security Agency/Central Security 
Service (NSA/CSS) to determine whether they were conducted in accordance with 
applicable statutes. Executive Orders (EO), Attorney General procedures, and 
Department of Defense (DoD) and internal directives. With few exceptions, the 
issues presented were routine and indicated that the operating elements 
understand the restrictions on NSA/CSS activities. 

b. -^Ot’The OIG conducted a review of NSA’s management of electronic ^ 

surveillance activities carried out under the Foreign Intelligence Surveillance Act 




(FISA) of 1978. In general terms, the review found that those activities ensure that 
the rights of U.S. persons are protected; however, the Agency's management of the 
internal FISA process is not completely effective and efficient. The process 
sometimes takes longer than necessary when time is of the essence and engenders 
confusion that has, on occasion, led to missed opportunities for timely collection. 
The OIG recommended improvements in the wr itten guidance that defines 
authorities and assigns roles and responsibilities, s tep-by-step ins tru ctio ns to guide 
FISA process participants, the need for tailored training o n FISA operational 
aspects, and meaningful metrics to gauge the efficiency of the process. NSA 
management has agreed to implement all recommendations. 

c. (U/tfiQt^The NSA OIG. withi I 




A program 

strength was that " I | had an embedded requirements manager who assessed 

10 implications of all EO 12333-related tasking. Employee knowledge levels were 

satisfactory and there were no violations of applicable laws, executive order. 

regulations, or policies noted, but the inspectors identified weaknesses in program 
management documentation and training and reporting compliance methods. The 
NSA OIG has tasked i I to develop and document standard operating 

procedures for the 10 program and to report 10 activities quarterly to the NSA OIG. 

The NSA OIG will track the action through completion. <b) (3 )-p.l. 


86-36 




d. (C//IlEL)'Along with inspectors from] | 

[ the NSA OIG completed 

the joint inspection, of ] ~| 

The inspection report noted that the site’s intelligence oversight program manager 
is visible and is actively involved in training and operations. Comprehension of 
initial and refresher 10 training is measured through web-based testing. Two 
weaknesses of the program were the lack of an implementing instruction detailing 
10 roles, responsibilities and program management procedures, and the lack of a 
complete list of raw traffic database auditors. The NSA OIG tasked the I 
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to prepare an operating instruction to detail the 10 roles, 
responsibilities and procedures for the workforce, to designate and publish a list of 
primary and secondary auditors to review interactive raw traffic databases, and to 
ensure that the auditors receive appropriate training in database audits. The NSA 
OIG will track the action through completion. 


2. (U) GENERAL COUNSEL ACTIVITIES 

'TO//StfThe NSA Office of General Counsel (OGC) reviewed various intelligence 
activities of the NSA/CSS to determine whether they were conducted in accordance 
with applicable statutes, EO, Attorney General (AG) procedures, and DoD and 
internal directives. The OGC advised Agency elements on a number of questions, 
including the collection and dissemination of communications of or concerning U.S. 
persons (USP); the reporting of possible violations of federal criminal law contained 
in SIGINT product; the testing of electronic equipment; and the applicability of the 
FISA. With few exceptions, the issues presented were routine and indicated that 
the operating elements understand the restrictions on NSA/CSS activities. The 
OGC did not file any reports with the Intelligence Oversight Board during this 
quarter. 

3. (U) SIGINT ACTIVITIES 

a. ( 6 // St)-Collection Against U.S. Persons 

(b) (3)-P.L. 86-36 

(1) (U) Intentional 

a. (3//0I) During this quarter, the Deputy Director of the Natio nal Se curity 

Agency (D/DIRNSA) granted approval for consensual collect ion ag ainst | [ U.S. 

persons. D/DIRNSA-approved consensual collection against [ | U.S. persons was 

routinely terminated this quarter. 

b. ^0//0t)"The AG granted authority to collect the communications oQu.s, 
persons during this quarter. 


(2) (U) Unintentional 

a^ (S//SI '>T! \ s mentioned in our 13 September 2004 report, several 


communications were inadvertently collected from a 
further investigation, the cause of the error was isolated to a 
was corrected to restore the integrity of collection. 


^ Upon 
and it 


b.-tO//SL^/NP)-This quarter, unintentional retriev als using the 

^raw traffic files resulted in 
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two incidents against U.S. persons overseas. Both incidents were reported to 
responsible oversight officials and corrective actions were taken. All unauthorized 
traffic collected has been destroyed. 

b. (U //FOUO) Dissemination of U.S. Identities (b)(i) 

(b){3)-P.L. 86-36 

(1) (U) Intentional 

(S//GtH n accordance with section 7 of USSID 18, U.S. identities were disseminated 
I times during this quarter. The following table shows the justification and the 
number of instances of dissemination: In the “Unmasked by Analyst” column, the 
U.S. identity was revealed in a serialized end product; in the “Unmasked at User 
Request” column, a U.S. identity was released to a user at the user's request. 


JUSTinCATION 


Unmasked 
bv Analyst 


Unmasked at 
User Reauesl 


7.2.C Necessary 


7.2.C.1 Foreign Official 


7.2.C.3 International Narcotics 


7.2.C.4 Criminal Activity 


7.2.C.7 U.S.Goverrunent Official 


TOTAL 


TOTAL 


(2) (U) Unintentional 


(b) 

(b) 


:3)-P.L. 86-36 


a. "fO/Z OD-Duiing this quarter the Signals Intelligence Directorate (SID) 
cancelled i fe lGINT products because they contained the identities of U.S. persons, 
organizations, or entities; those products that contained information derived from 
communications of U.S. persons were not reissued. 


b. (TO//Ol[ 


containing the identities of U.S. persons or based 
later identified as U.S. persons. In all instances 


released a total of| Ireports 
on the co mmunications of persons 
jcancelled the reports, 


which were either not reissued or were reissued with the proper minimization. 


(b) (1) 

(b) (3)-P.L. 86-36 
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(3) (U) Raw Traffic Dissemination Outside the SIGINT Production 
Chain 

(b) <3)-P.L. 86-36 



1 The SID ensures that the 
personnel are trained by the UGC on NSA's legal restrictions and on proper 
handling and dissemination of SIGINT data^ 


Personnel working in or with SID during this quarter included represen tatives of 

'b) Ot-P.l. 86-36 



4. (U) Other Activities 

a. (U//F OUO) .RSA Incidents 


(b)(1) 

(b) (3)-P.L. 86-36 
(6){3)-18 use 798 
(b) (3)-50 use 3024(i) 


~|of transcripts based otf 


"tTS/ZI'l’P^The inquiry into 

communication from ] | (see our report 

dated 9 June 2004) has concluded. Although the | i ntercept of the 
communication was destroyed as required, the corresponding transcripts were 
retained improperly. The reason for the non-compliance was a misunderstanding 
by the analyst who be lieved that the transcripts were not com munica tions as 
defined in USSID 18.1 


All 


transcripts were deleted from the database. SID p rovided training on USS ID 18 


and FISA procedures to the I ^taiT. A review off 


lis scheduled for this fiscal 


year. 

b. (U) Assistance to Law Enforcement 


(b) (1) 

(b)(3)-P.L. 86-36 


fS/ZOD-During this quarter, the SID responded to } [ re quests for technical 
assistance from law enforcement, including requests from]_ 
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c. (U) Working Aids 

(U//FOUO) The SID Office of Oversight and Compliance maintains "U.S. 

Identities in SIGINT” and a matrix of blanket reporting waivers on its web page 
for use by the NSA/CSS Enterprise. The E.O., NSA/CSS Policy Number 1-23, DoD 
Regulation 5240.1-R, and USSID 18 are also available on-line. 
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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE G. MEADE, MARYLAND 20755-6000 


29 November 2004 


MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 


THRU; Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT; (U ^OUO) ■ Report to the Intelligence Oversight Board on NSA 
Activities - INFORMATION MEMORANDUM 


(U/ /FOUO) Except as previously reported to you or the President, or 
otherwise stated in the enclosure, we have no reason to believe that any intelligence 
activities of the National Security Agency during the quarter ending 30 September 
2004 were unlawful or contrary to Executive Order or Presidential Directive, and 
thus required to be reported pursuant to Section 1.7.(d) of Executive Order 12333. 

(U/ /FOUO) The Inspector General and the General Counsel continue to 
exercise oversight of Agency activities by means of inspections, surveys, training, 
review of directives and guidelines, and advice and counsel. These activities and 
other data requested by the Board or members of the staff of the Assistant to the 



(U// EQUO ^I concur in the report of the Inspector General and the General 
Counsel and hereby make it our combined report. 

MICHAEL V. HATOEN 
Lieutenant General, USAF 
Director, NSA/Chief, CSS 


Enel: 

Quarterly Report 
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